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ABSTRACT 


Finding  efficient  testing  procedures  for  digital  machines  has  be- 
come  of  prime  concern  to  the  Industry  due  to  high  circuit  densities 
brought  about  by  evolution  in  semiconductor  device  tectuiology. 

The  number  of  liqmts  reqvdred  for  testing  can  be  reduced  from  the 
set  of  all  possible  Input  combinations  to  a  smaller  group  derived  from 
a  dictionary  of  tests  which  defines  unique  relationships  between  failure 
mode  and  ou^ut  response.  Reduction  of  the  test  dictionary  by  prlme- 
Inqilluant  minimization  methods  and  by  serial  application  of  the  reduced 
set  can  lead  to  manageable  test  programs.  These  Involve  sequence 
lengths  characterized  by  a  lower  limit,  bounded  by  the  logarithm  of  the 
nui^r  of  Initial  table  entries. 

Testing  sequential  machines  Is  especially  cumbersome  due  to  the 
dependency  of  circuit  response  on  previous  Input  sequences.  Lines  of 
attack  Include  checking  for  consistency  between  circuit  response  and 
design  state  table.  A  more  manageable  scheme  involves  grouping  ma¬ 
chines  of  specific  failures  according  to  their  responses  to  selected  test 
Inputs.  A  proper  choice  of  liq>uts  for  each  test  step  and  the  adaptive 
a]^lcation  of  the  resulting  sequences  provides  relatively  efficient 
fault-location  programs. 

Practical  schemes  lor  complete  testing  have  yet  to  be  found.  Adap¬ 
tive  sequence  generators  with  programmed  options  tor  state -table  and 
combin^lonal  analysis  appear  .to  yield  more  promising  results. 
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DIGITAL  DIAGNOSTIC  TECHNIQUES; 
SURVEY  AND  RECOMMENDATIONS 


INTRODUCTION 

The  development  of  Integrated  circuitry  and  the  mass  production  of  large-scale  dig¬ 
ital  hardware  have  pcsed  new  problems  for  the  Industry.  Among  them  Is  how  to  check 
the  operation  of  digital  machines  without  expending  excessive  man  hours  of  labor.  One 
obvious  approach  Is  automation,  and  It  Is  now  being  extensively  used  by  most  large  sup¬ 
pliers  of  electronic  oevices.  Yet,  there  are  still  problems  which  relate  to  the  specific 
algorithms  used  to  generate  the  set  of  tests  to  apj^y  to  the  device  In  question.  The  par¬ 
ticular  choice  of  test-generating  algorithms  Is  critical  in  that  the  number  of  Input  combi¬ 
nations  to  be  searched,  for  all  but  the  smallest  machines,  can  become  extremely  large 
for  complete  testing  If,  Indeed,  complete  testing  is  possible.  This  point  is  especially 
relevant  when  only  a  lev.'  machines  of  a  design  are  being  produced. 

It  should  be  noted  that,  with  the  advent  of  integrated  circuitry,  modular  construction, 
and  microscopic  dimensions,  the  traditional  probing  of  Internal  circuitry  is  generally  not 
feasible,  and  tests  have  to  depend  on  the  ^nput-output  relationships  of  the  machine  as  a 
black  box.  Test  points  can  be  brought  out  from  strategic  circuit  areas,  but  this  practice 
thwarts  the  ideal  of  designs  with  low  pin-to-gate  ratios. 

Digital  systems  contabi  both  combinatorial  and  sequemial  logic  which  have  to  be 
tested.  The  problem  of  generating  tests  for  combinatorial  logic  has  been  approached, 
with  feasible  results  being  obtained  by  Kautz  (1)  and  by  Hornbuckle  and  Spaim  (2).  How¬ 
ever,  a  complete  solution  for  the  geneial  class  of  sequential  machines  has  not  been  ar¬ 
rived  at,  although  powerful  techniques  for  reasonably  thorough  checkout  have  been  devised. 


TESTING  COMBINATIONAL  LOGIC 

In  combinational  logic,  the  response  to  each  test  input  is  independent  of  the  previous 
input  sequence.  Therefore,  an  exhaus'  ive  logic  test  sequence  for  a  circuit  having  n  in¬ 
puts  consists  of  2"  tests.  A  method  of  reducing  the  required  number  of  tests  is  to  list  a 
set  of  faults  to  be  considered  and  then  to  design  tests  to  detect  the  occurrence  of  these 
faults.  Certain  assumptions  are  generally  made  about  these  faults.  First,  they  are  con¬ 
sidered  not  to  be  intermittent;  l.e.,  once  a  fault  has  occurred  it  remains  long  enough  to 
be  detected  and  corrected.  Second,  while  there  are  methods  for  detecting  multiple  fail¬ 
ures,  only  single  faults  are  considered,  multiple  faults  having  small  occurrence  probabil¬ 
ities;  also,  it  is  intuitively  logical  that  most  tests  derived  for  detecting  single  fa^ts  will 
also  Indicate  abnornudltles  when  additional  failures  are  present  in  the  system.  Third, 
the  types  of  fault  generally  considered  are  those  which  cause  any  input  or  output  line 
wlthto  the  system  to  be  stuck  in  a  1  or  0  condition.  Less  often,  open  connections  or 
shorts  between  different  lines  are  laken  into  consideration. 

The  following  is  a  discussion  of  the  aspects  of  specific  techniques  applicable  to  com¬ 
binatorial  machines.  It  is  assumed  that  a  model  on  which  the  machine  in  question  and  all 
designated  faults  can  be  simulated  is  available.  Most  likely,  this  would  be  a  general- 
purpose  computer  programmed  as  a  logic  simulator. 
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Generation  of  Test  Dictionary 

The  first  step  In  the  test-generation  procedure  is  the  forniatlon  of  a  fault-test  dic¬ 
tionary.  This  dictionary  is  a  table  which  lists,  for  each  input  combination,  the  associated 
failure  conditions  causing  abnormal  output  combinations.  From  here  on,  the  digital  unit 
operating  error-free  will  be  referred  to  as  the  good  machine  and  the  unit  under  a 
specific  failure  condition  i  as  the  bad  machine  mi  The  central  problem  then,  is  to  find 
the  complete  set  of  inputs  and  associated  bad  machines  for  wMch  the  output  of  the 
good  machine  m,  and  the  differ. 

Two  approaches  have  been  used  in  constructing  a  fault -test  dictionary: 

1.  Entries  in  the  fault  dictionary  can  be  generated  by  starting  with  the  input  list  and 
finding  the  set  of  faults  corresponding  to  abnormal  outputs  for  each  input  combination; 

2.  Conversely,  given  any  fault,  one  can  find  that  set  of  inputs  which  causes  the  output 
to  be  different  for  the  good  machine  and  the  specified  faulty  machine. 

The  first  method  of  finding  fault-test  entries  is  conceptually  straightforward. 

Let  us  assume  that  the  logic  system  is  fully  descrlbed  in  a  functional  block  simula¬ 
tion.  Then  starting  with  input  xj.  i,,  Xj . x„  through  all  combinations  to  Xj,  x,, 

Xj.  ....  x„,  each  failure  mode  of  Interest  can  be  simulated  and  the  output  noted  in  each 
case. 

After  all  input  combinations  have  been  applied  for  each  simulated  failure  mode,  a 
table  can  be  set  up  as  below. 


X„  •••  X,  Xj 

_ 

^  ^  ^  “•  fi 

0  0  0 

10  0  0 

0  0  1 

1 

10  1  1 

0  10 

0 

0  0  1  1 

1  1  1 

0 

110  1 

The  //s  are  the  output  of  the  machine  for  each  simulated  failure  i  a.id  input  Xj. 

xj,  X, . x„.  Note  that  no  assumption  is  made  about  the  nature  ol  the  faults,  whether 

they  are  single,  multiple,  short  circuits  or  open  circuits. 

It  is  clear  that  generating  the  fault  dictionary  by  input  simulation  requires  2"^  com¬ 
plete  simulations  of  the  machine,  where  n  is  the  number  of  input  lines  and  F  the  number 
of  failure  modes. 

The  second  technique  is  the  failure  sensitivity  method,  whereby  the  number  of  oper¬ 
ations  involved  in  setting  up  the  test  dictionary  can  be  reduced.  The  approach  is  to  as¬ 
sume  a  failure  and  then,  using  the  machine  description,  generate  that  set  of  Inputs  which 
sensitizes  the  machine  output  to  each  failure  listed. 

In  this  way  it  should  be  feasible  to  generate  the  test  dictionary  with  only  f  sensitiv¬ 
ity  calculations.  Whether  the  advantages  of  the  smaller  number  f  of  sensitivity  calcula¬ 
tions  is  offset  by  the  greater  complexity  of  each  calculation,  as  compared  with  direct 
simulation,  is  another  problem. 
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Two  sensitivity  methods  have  been  presented  in  the  open  literature. 

1.  The  first  method  uses  an  operation  which  has  been  called  the  "Boolean  difference" 
by  Sellers,  Hsiao,  and  bearnson  (3).  Let  the  good  machine  be  denoted  by  its  function  r(x) 
and  the  machine  under  failure  by  e'(x).  Find  the  input  states  under  which  f  (x)  f 
This  is  the  condition  under  which 

f  (X)  ®  /^(x)  =  1  , 


/(X)  •  F^)  *  Fix)  ■  F‘ix)  =  1  . 

For  a  single  "stuck  at  1  or  (f*  type  of  failure  in  terminal  i,  then 


. . ■«(„)  ®  f(x,,  Xj . x^, 


Where  Dg  is  the  difference  operator.  Sellers  and  others  (3)  and  Amar  and  Condulmarl 
(4)  have  derived  relationships  which  facilitate  the  application  of  the  difference  operator 
to  the  various  Boolean  forms.  The  enticing  aspect  of  this  method  is  that  it  uniquely  de* 
fines  those  inputs  and  the  states  they  must  be  in  to  sensitize  the  output  to  the  state  ci 
terminal  i. 

It  only  remains  to  enter  these  input  combinations  including  "don't  cares"  into  their 
proper  rows  of  the  fault -test  dictionary. 

The  disadvantages  of  this  method  are  that  it  does  not  map  the  specific  state  of  ter¬ 
minal  i  to  the  specific  state  of  the  machine  output,  and  that  memory  requirements  can 
become  excessive  when  computing  the  Boolean  difference  for  a  function  of  many  variables. 

2.  Another  sensitivity  method,  called  the  n-Algorithm,  after  Roth  (5,6)  uses  the  in¬ 
ternal  line  structure  of  a  circuit  to  describe  the  function  and  its  failures.  In  this  method, 
each  logical  unit  in  the  circuit  is  represented  by  a  type  of  cubical  complex  known  as  a 
o-cube.  It  provides  a  representation  of  the  sensitivity  state  between  various  terminals 
of  a  logic  block  and  is  derived  from  the  singular  cover  as  follows. 

An  AND  gate  with  its  singular  cover  and  p-cube  is  shown  in  Fig.  1.  The  singular 
cover  of  a  logic  unit  is  a  table  that  lists  its  terminal  states  for  different  outputs  and 
completely  describes  its  operation.  The  associated  p-cubes  can  then  be  deiived  by 
matching  all  of  the  singular  cover  rows  by  pairs.  Whenever  a  condition  is  found  where 
the  output  and  some  input  terminal  differ  in  state,  a  new  cover  row  is  written  with  P's 
inserted  for  those  terminals  changing  state.  One  can  see,  then,  that  p-cubes  relate  ,en- 
sitivity  states  of  pairs  of  logic  unit  terminals.  Given  a  circuit  made  up  of  a  number  of 
interconnected  logic  units,  the  P-cubes  for  each  unit  are  then  liidced  so  that  terminal  as¬ 
signments  are  consistent  within  columns.  This  forms  an  array  in  which  each  column 
represents  different  terminals  in  th  j  circuit  and  each  row  a  different  P-cube. 

Now,  finding  a  path  through  the  circuit  relating  the  output  state  to  the  state  of  some 
Internal  terminal  Involves  finding  a  path  through  the  p-cube  array  such  that  every  P-cube 
element  chosen  is  consistent  in  terminal  state  assignment  with  every  other  element.  U 
a  consistent  sensitivity  path  is  possible  for  some  input  condition,  the  algorithm  will  find 
it. 

As  a  simple  illustration  of  this  method,  the  following  procedure  finds  an  input  com¬ 
bination  sensitizing  the  output,  line  6  of  Fig.  2,  to  the  state  of  line  4,  the  AND  gate  block. 
The  singular  covers  and  associated  P-cube  table  are  shown  with  the  circuit.  Since  we 
wish  to  have  the  circuit  respond  to  state  changes  in  ,'ine  4,  first  locate  a  P-cube  in  the 
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table  with  a  r  In  column  4  (representln({  line  4).  Picking  speelftee  ttant  a  1  on 

line  2  constrains  the  state  of  line  4  to  follow  that  of  line  1.  Since  line  2  is  fixed  at  truUi 
value  1,  consistency  demands  that  any  next  0-cube  we  choose  from  the  table  have  a  1  or 
0  in  column  2.  Before  we  do  that  however,  let  us  continue  finding  a  0-cube  relating  sen¬ 
sitivity  in  line  4  to  states  further  along  in  the  circuit.  Picking  0*0*0*  satisfiea  this, 
speci^ing  that  the  output,  line  6,  is  sensitized  directly  to  the  state  of  line  4  when  a  0  is 
on  line  5.  Combining  the  two  0-cubes  chosen  thus  far,  we  have  0>i*0*O'0*.  lOput  lias  S 
has  yet  to  be  examined.  Seeing  that  line  2  is  in  state  1  we  could  not,  for  Instanoe,  pick 
0>r*0>,  since  2  and  5  would  be  required  to  be  in  identical  states,  and  this  would  be  inoon- 
slstent  with  the  assignments  already  made.  Picking  i  *0*0*  satisfies  consistency  and 
specifies  a  0  on  line  3,  matching  line  S.  Combining  the  three  0-cubes,  we  get  0*1*0*0*010*. 
We  now  have  an  input  specified  which  sensitizes  the  ou^t  to  the  state  of  line  4  and  have 
an  input  line,  line  1,  which  can  be  used  to  exercise  the  logic  for  the  test. 


Application  of  Tent  Dictionary 

Having  derived  a  test  dictionary  as  described  above  for  a  given  machine,  how  can  it 
be  used  to  Isolate  a  given  fault  or  determine  if  the  machine  is  good?  Since  we  are  con¬ 
cerned  with  distinguishing  between  columns  ft  representing  different  machines,  (n^. 

/n, .  m, . mi),  ve  generate  a  new  fault  matrix  c  by  the  following  method.  For  fault 

detection,  where  we  are  not  concerned  with  distinguishing  between  various  types  of  fail¬ 
ures,  we  define  a  reference  column,  namely  f^,  for  the  good  machine.  Then,  in  every 
fault  column  Fi  corresponding  to  machine  n,  where  the  machine  output  differs  from  that 
of  flig  we  place  a  1  in  the  appropriate  row  and  column  of  matrix  Q .  If  the  two  outputs 
are  Identical,  there  Is  no  dlstlnguishabUity  and  we  enter  a  0.  It  I  j  clear  that  the  0  matrix 
will  have  one  less  column  than  the  f  matrix. 

It  is  appropriate  at  this  point  to  bring  in  the  notion  of  fault  diagnosis  as  opposed  to 
simple  fault  detection,  if  the  reader  has  not  already  considered  It.  In  fault  detection,  we 
are  concerned  only  atmt  whether  the  machine  under  test  is  working  or  not.  In  diagnosis, 
if  the  machine  has  failed,  we  wish  to  ascertain  which  of  the  faults  listed  is  present. 

Fault  diagnosis  is  also  referred  to  as  fault  location. 

When  the  c  matrix  is  extended  to  fault  diagnosis,  then  the  reference  columns  become 
those  faults  which  we  wish  to  locate  either  singly,  or  in  groups  as  in  the  case  of  class 
failures.  Then,  every  reference  column  is  compared  with  every  other  column  not  in  its 
failure  class,  and  new  dlstlnguishabUity  columns  of  ones  and  zeros  are  generated.  There 
will  be  one  column  generated  for  every  pair  of  columns  of  F  that  belong  to  different  faU- 
ure  classes. 

The  resultant  failure  dlstlnguishabUity  table  0,  then,  is  analogous  to  the  description 
of  a  multiterminal  network,  and  we  wish  to  minimize  it  such  that  all  of  the  faUure  classes 
of  c  are  distinguishable  using  the  least  number  of  input  combinations.  The  methods  of 
reduction  used  correspond  to  those  used  for  finding  a  prime-lmplicant  cover  of  a  given 
switching  function  from  its  prime-lmplicant  table. 

When  the  inputs  in  the  reduced  fault-test  table  are  applied  to  the  unit  under  test,  the 
particular  machine  we  have  wUl  be  found  from  the  column  which  satisfies  the  set  of  test 
outputs. 

Bounds  on  the  Number  of  Tests 

It  is  of  interest  to  place  upper  and  lower  bounds  on  the  number  of  tests  required  to 
identify  the  machine  being  test^.  That  is,  how  noany  columns  there  are  in  the  reduced 
test  matrix  will  determine  the  number  of  testa. 
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Obvlou«ly»  tlM  upp«r  bound  on  the  number  of  tests  required  would  be  equal  to  the 
number  of  failures  In  the  original  fault-test  dictionary  In  that  case  where  no  mlnlmlaa- 
tlon  of  the  o  matrix  is  possible.  A  lower  bound  on  the  required  tests  would  be  generated 
by  the  ease  where  the  fault-test  matrix  c  contains  a  subset  of  rows  which  constitute  a 
binary  oodlng  of  all  the  columns.  Reduction,  In  this  case,  would  result  In  M  tests, 

#  e  1  +  logj  *  , 

Where  a  is  the  number  of  different  fault  classes. 

Preparata  (7)  has  shown  the  average  of  the  minimal  test  schedule  to  be  close  to 
a  log,  a,  which  is  not  far  from  the  minimum.  Note  that,  when  doing  fault  detection,  the 
number  of  fault  classes  Is  one. 


Serial  Vs  Fixed  Test  Schedules 

Once  the  minimum  test  matrix  1ms  been  derived,  there  remains  a  further  consldera- 
tlon  with  regard  to  the  teat  procedure.  In  what  order.  If  any,  should  the  Individual  tests 
be  applied  to  the  machine?  If  all  toe  inputs  In  the  test  group  are  to  be  aiq;>Ued  In  every 
case,  toere  Is  no  need  to  worry  about  their  order,  since  the  entire  sequence  will  be  run 
anywi^. 

But,  consider  the  desirability  of  examining  toe  results  of  each  step  in  a  test  sequence 
and  letting  toe  results  of  that  step  determine  the  next.  It  Is  possible  to  gain  sufficient  In- 
formatlan  to  Indicate  some  failure  mode  without  toe  application  of  the  entire  test  set. 

At  any  point  in  the  test  sequence,  we  ne.ed  a  way  of  measuring  the  information  to  be 
gained  from  ^iplylng  any  remalidng  available  test  Input.  From  an  Information  theory 
viewpoint,  that  tost  which  most  evenly  partitions  toe  test  results  is  the  optimum,  pro¬ 
vided  all  failure  classes  have  the  same  probability  of  occurrence.  For  example.  If  each 
test  result  branches  the  failure  possibilities  Into  two  groups  (assuming  a  single  binary 
cutout),  we  will  want  to  choose  the  next  test  from  a  particular  branch  on  the  basis  that 
such  a  test  will  most  evenly  divide  the  remaining  possible  failure  classes  Into  two  groups. 
In  a  way  similar  to  toe  case  of  the  fault-test  matrix,  It  Is  possible  to  reduce  the  number 
of  levels  In  the  test  tree  to  L, 

L  =  1  +  log,  IK  , 

vtoere  is  the  number  of  failure  classes. 

The  minimum  stated  above  could  be  achieved  where  each  test  In  the  sequence  divides 
the  remaining  failure  classes  into  two  equal  parts. 


TESTING  SEQUENTIAL  MACHINES 

In  sequential  machines,  tests  are  not  Independent.  To  place  a  network  in  a  state  in 
which  a  certain  failure  can  be  detected,  a  sequence  of  Inputs  must  be  applied.  In  other 
words,  an  incorrect  state  generated  within  the  logic  by  a  fault  may  require  many  test  In¬ 
puts  briore  Its  effect  Is  observable  at  the  output.  It  Is  s^iparent  then,  that  test  sequences 
for  sequential  machines  can  become  very  long. 

At  this  point.  It  might  be  well  to  review  some  of  the  assumptions  underlying  the  auto¬ 
matic  testing  problem. 
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1.  It  is,  at  course,  assumed  in  application  that  inputs  and  outputs  of  these  machines 
are  electrical  and  blnai^  In  nature.  This  does  not,  however,  restrict  the  usefulness  of 
the  theory. 

2.  Further,  to  generalize  the  approach  to  the  fullest  extent,  it  Is  necessary  to  not 
restrict  oneself  to  synchronous  logic  or  to  specialized  configurations  designed  to  suc> 
cumb  easily  to  certain  test  methods.  It  is  expected,  however,  that  the  unit  under  test  has 
been  designed  as  a  strongly  connected  machine  even  If  It  might  not  be  so  under  failure. 

3.  It  is  expected  that  a  complete  description  of  the  functioning  design  Is  available  In 
the  form  of  a  logic  diagram,  state  table,  or  other  self-contained  format  amenable  to  ap¬ 
plication  In  computer  simulation  software. 

4.  Finally,  as  mentioned  before,  sdl  expected  modes  of  failure  have  been  prespeci¬ 
fied  along  with  their  effects  on  the  system. 


Philosophy  of  Diagnosing  Sequential  Machines 

Diagnosis  of  a  faulty  system  In  broad  terms  entails  discovering  the  set  (sequence)  of 
machine  outputs  which  cUffer  from  those  of  the  good  circuit  under  a  specified  Input  set. 
Once  these  are  fotuid,  one  can  relate  them  to  one  of  the  specified  modes  of  failure. 

The  diagnostic  task,  as  mentioned  before,  for  a  combinational  digital  machine  Is 
straightforward,  assuming  that,  under  failure,  the  ccmbinatlonal  network  does  not  be¬ 
have  sequentially.  The  set  of  input  combinations  required  for  complete  testing  never 
exceeds  the  number  of  failure  modes  and,  in  general,  will  be  less. 

Testing  a  sequential  machine,  however,  requires  the  application  of  a  set  of  input 
sequences.  The  length  of  these  depends  on  the  number  of  internal  states  of  the  machine, 
along  with  the  number  of  Its  Input  and  output  terminals. 

Testing  methods  have  evolved  along  two  paths.  The  first,  or  distlngulshabllity  phi¬ 
losophy,  attempts  to  derive  test  sequences  which  distinguish  between  selected  machines. 
By  sult^ly  intersecting  these  tests.  It  is  possible  to  derive  a  set  of  Input  sequences 
which  will  Isolate  failures,  Tne  second,  or  black  box,  philosophy  used  by  Moore  (8)  does 
not  examine  specific  cases  but  interrogates  the  collection  of  machines,  observing  Inputs 
and  the  corresponding  outputs.  Tests  tu-e  then  chosen  on  the  basis  of  how  well  they  par¬ 
tition  the  set  of  machines  Into  equivalent  failure  classes. 


State  Table  Methods 

One  way  of  checking  a  sequential  machine  is  to  verify  that  it  operates  in  accordance 
with  its  design  state  table.  Hennle  (9)  makes  use  of  this  method  in  a  testing  scheme 
which  checks  each  state  and  the  transitions  from  each  state  to  every  other  state  in  the 
table.  To  accomplish  this,  the  circuitry  Is  first  located  in  some  knovui  starting  state. 
Then,  an  input  chosen  to  take  the  circuit  Into  some  new  state  Is  applied  and  the  result 
checked  against  the  design  state  table.  If  all  ou^uts  occur  correctly,  then  the  circuit  Is 
good. 

To  place  the  circuit  in  a  known  starting  state  requires  a  synchronizing  sequence 
which  leaves  the  circuit  in  a  known  state.  Since  uot  all  circuits  have  synchronizing  se¬ 
quences,  one  can  use  a  "homing"  sequence  which,  when  applied,  provides  an  ou^t  which 
uniquely  defines  the  final  state  from  which  point  a  transition  sequence  will  bring  the  dr  • 
cult  into  the  desired  starting  state.  An  input  chosen  to  transfer  the  circuit  to  a  new  state 
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Is  spifllsd  Slid  tjlie  result  checked  by  a  distinguishing  sequence.  The  distinguishing  se- 
Hiusnoe  provides  a  unique  outp'jt  sequence  for  each  different  starting  state;  thus,  it  Iden- 
ttttos  the  initial  state  of  the  circuit  to  which  It  is  applied.  In  iq>plylng  the  various  se¬ 
quences,  one  does  not  worry  about  whether  the  circuit  is  responding  according  to  the 
state  table,  since  an  incorrect  transition  at  any  stage  will  appear  under  the  application  of 
~^bs  next  distinguishing  sequence,  and  the  malfunction  will  be  detected. 

For  a  network  havliig  many  states,  this  procedure  will  require  large  amounts  of 
time  and  conqniter  memory.  The  minimum  number  of  distinguishing  sequences  that  has 
to  be  applied  is  ■(n),  where  ■  is  the  number  at  ii^mts  and  n  the  number  of  states.  In 
fi^  Hennie  states  that  the  total  number  of  test  steps  required  can  reach 

■  (n)  (2L'f2n-l)'»n(n-l)'f  (nfl)L  , 

^wbere  i.  is  the  length  of  the  distinguishing  sequence.  Also,  this  method  is  not  diagnostic 
In  that  it  provides  only  the  verlflcatlan  of  correct  operation. 

A  fortber  disadvantage  of  this  iqiproach  is  that  not  all  circuits  have  distinguishing 
sequmces.  In  this  case,  a  particular  state  might  be  identlflod  by  observing  its  response 
to  two  or  more  different  iiqiuts  called  characterizing  sequences.  The  drcult  must  there¬ 
fore  be  brou^  into  a  state  as  many  times  as  characterizing  sequences  are  needed  to 
identify  IL  The  resulting  teats  become  many  times  longer. 

Poage  and  McCluskey  (10)  expanded  on  this  method  by  considering  the  state  tables  of 
the  set  ai  specified  bad  machines  as  well  as  of  the  good  one.  By  combining  all  the  state 
tables,  an  Indication  of  ttie  initial  states  for  which  distinguishing  sequences  cause  differ¬ 
ent  ou^wts  for  different  machines  is  given.  This  procedure  guarantees  the  shortest  pos¬ 
sible  test  sequences  having  diagnostic  properties.  Here  again,  the  computer  time  and 
memory  needed  to  handle  the  sbde  tables  is  prohibitive. 


Search  Method 

Hie  basic  search  method  was  first  utilized  by  Seshu  and  Freeman  (11)  and  improved 
iqpon  later  by  Seshu  (12).  Broadly  speaking,  it  entails  sequentially  questioning  a  coUec- 
tion  of  machines  and  grouping  them  according  to  their  responses  until  no  further  parti- 
tlonlng  is  possible  under  repeated'  questions.  Each  machine  is  treated  as  a  black  box  and 
evaluated  strictly  on  the  basis  of  its  input-ou^iut  relationships. 

The  correctly  operating  network  and  the  networks  operating  under  the  specified  fail¬ 
ures  are  all  simulated.  The  entire  set  of  machines  is  then  placed  in  some  starting  state 
•  g.  One  of  the  criteria  of  this  method  le  that  there  exist  input  combinations  which 
uniquely  set  the  states  of  any  of  tlie  machines  an.  All  input  combinations  are  then  ap¬ 
plied  to  all  the  machines  and  the  outputs  recorded.  One  of  these  input  combinations  will 
be  chosen  to  represent  this  step  of  the  test  sequence  based  on  the  output  patterns  of  the 
g'xnq).  The  next  step  is  a  repetition  of  the  first  except  that  only  those  inputs  which  do 
not  tUfler  in  more  than  one  variable  from  the  previously  select^  test  li/  :ut  are  allowed. 
This  constraint  follows  from  the  philosophy  of  testing  asynchronous  networks  in  general. 

The  criteria  by  which  the  next  inputs  in  the  test  sequence  are  chosen  is  closely  re¬ 
lated  to  the  efficiency  of  the  entire  testing  scheme.  In  Seshu's  original  method,  a  local 
search  Is  used.  That  Is,  the  suitability  of  a  test  for  step  n  of  the  sequence  is  based  upon 
tile  results  of  step  n  -  i  only.  Global  methods,  which  back  k  steps  to  the  n  -  «  test, 
become  prohibitively  unwieldy  with  increasing  k,  although  they  could  be  applied  for 
snuill  k’B.  Chang  (13)  presents  a  well-organized  treatment  of  d:  stlngulshability  criteria 
by  which  test  steps  are  chosen. 
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To  appreciate  the  motivation  behind  the  dlstlngulshabillty  criteria,  let  ns  review  a 
lew  points. 

In  testing  lor  lallures  we  might  want  to  ascertain  one  ol  three  things.  First:  Is  the 
unit  under  test  operating  correctly  or  not  (Is  it  machine  mg  or  mj )?  Second:  B  the  unit 
has  tailed,  which  are  we  deall^  with?  Third:  U  the  unit  has  tailed.  In  vddch  sub¬ 
group  ol  lallure  classes  does  the  unit  tall?  The  last  question  properly  arises  when  we 
are  baling  with  a  network  composed  ol  smaller  subassemblies  such  as  logic  cards  or 
Integrated  circuits,  and  diagnosing  a  lault  only  means  llndlng  In  which  subassembly  It  Is 
located  so  that  it  can  te  recced.  So,  we  can  always  divide  the  set  ol  machines  into 
equivalence  classes  ot  lallure.  In  case  we  wish  to  distinguish  each  and  every  lailure, 
every  machine  tails  Into  a  separate  class.  Only  in  the  case  of  lault  detection  do  all  the 
tailed  machines  tall  Into  only  one  class.  between,  we  assign  machines  to  classes  ac¬ 
cording  to  subassembly  relationships. 

Now,  when  questioning  the  set  ol  machines,  we  would  like  responses  to  be  lor 
aU  machines  in  the  same  lailure  class.  B  this  were  possible,  we  would  have  a  test  which 
uniquely  delines  the  lallure  mode  In  one  step!  However,  our  network,  in  general,  does 
not  have  enough  output  combinations  to  partition  every  lailure  class  and  even  so,  it  Is 
highly  unlikely  that  a  single  liqiut  tost  combination  would  provide  such  a  lortunate  result. 

Seshu's  work  utilizes  an  irrformation  gain  criteria,  which  measures  the  ability  of  a 
test  to  partition  each  lault  Into  a  separate  channel.  For  a  test  which  generates  m  parti¬ 
tions,  its  Inlormatlon  gain  can  be  computed  as  follows:  Relerting  to  Fig.  3,  let  (i  +  i,  /,), 
( i  + 1 .  ;  j),  . . . ,  ( i  +  1 ,  bp  the  m  e^valence  classes  which  result  by  ap^ylng  test  T* 
to  (i .  y ) — the  equivalence  class  at  the  ith  test  level  and  the  y th  partition.  Then  the  in¬ 
formation  gain  for  test  Is 


Pk 


y  *•  1-  J,) 


(1) 


where  all  laults  in  (i,  y )  are  assumed  equlprobable. 

The  information  gain  of  Eq.  (1)  Is  suitable  lor  binary  partitioning,  tt  can  be  extended 
to  the  m-partitloned  case  by  taking  the  summation  ot  the  gains  ol  m  -  i  binary  partitions. 
B  a  priori  probabilities  are  assigned  to  lallures,  suitable  weightings  can  be  a^ied  to 
the  terms  of  the  summation. 


When  a  test  level  Tj,  on  equivalence  class  (i.y)  gives  no  further  partitioning,  there 
is  an  information  gain  ol  zero,  a  new  reset  condition  Is  tried,  and  the  process  continues. 
B,  alter  all  resets  have  been  tried,  no  further  partitioning  Is  possible,  then  the  machines 
in  that  branch  at  the  test  tree  are  Indistinguishable  by  this  method,  and  the  process  pro¬ 
ceeds  with  other  classes  until  all  possible  partitlanlng  is  completecL  The  result  is  a  test 
tree  which  can  be  applied  to  the  network  In  question,  branching  as  indicated  by  the  output 
until  a  path  end  is  reached  Indicating  what  failure  or  group  ol  lallures  applies. 

In  his  paper,  Chang  (13)  gives  a  better  method  ol  measuring  information  gain  where 
lallures  in  a  submodule  are  grouped  into  the  same  equivalence  class.  The  essential  Idea 
Is  that  one  would  like  to  apply  a  test  which  would  distinguish  every  mnpJiina  mj  from 
every  other  machine  not  in  its  equivalence  class.  B  every  machine  is  in  Its  own 
class,  there  are  ff  (Jv  >  i)/2  pairs  to  be  distinguished.  A  test  is  most  useful,  then,  B  It 
distinguishes  the  greatest  number  of  pairs  of  machines.  Thus,  we  count  the  pairs  formed 
by  each  machine  in  (j  i  i.  )  and  those  In  (i  *■  i,  y^ )  as  given  in  Eq.  (2): 
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Notation 


(iij)  =  Ec^ivalence  clait  at  ith  level  and  jth  partition 
n(i,>)  s.Nmber  of  machines  in  (i.j) 


"*(■*'+  111,)  =  Number  of  machines  in  (i+  1,;,)  resulting  from  applying 

(t./) 

*  Test  at  level  k  of  sequence 
®  Output  resulting  from  test 

Fig.  3  -  ParttUoniDg  by  teat  step  T* 


rk  •  "*(*  +  1.  /,)  tnt(i+  1.  ,j)  ♦  n^(i  t  1.  /^)  +  ...  +  1, 

+  1.  Jj)  1.  13)+  •••  +  n»(i  +  1.  j„)] 

*  +  nt(i+l.  [n*(itl,  /_)] 


"»(J  +  1.  >,) 


2]  n*(t  +  I.  f,) 


(2) 


Now,  when  we  extend  this  to  fault  location  within  modules,  we  redefine  yt  by  removing 
from  the  count  those  fault  pairs  that  are  distinguished  by  T*  but  are  associated  with  the 
same  module. 


Let  n  (i  +  1,  denote  the  number  of  faults  in  {i  +  1.  y,)  associated  with  module  p. 
Thus,  by  the  same  reasoning  we  used  to  obtain  Eq.  (2),  we  get 


ar-1  ' 

r 

m 

+  ./.)p  E 

•  •t  1 

L  p 

fault  pairs  that  need  not  be  distinguished.  Subtracting  this  from  y*  leads  us  to  our 
measure 
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*■1  f 


n*(i+I.  y,)f  21  >t)  -  >()f 


For  an  example  of  a  test  tree  generated  by  this  procedure,  see  Fig.  4. 


(i+2,  ij) 


^kj  -  Output  for  equivalence  class  j  resulting  from  test  k  . 
Fig.  4  -  PartltioniDg  of  faults  to  within  modules 


(3) 


Chang’s  procedure  has  the  advantage  of  generating  shorter  test  sequences  when  test¬ 
ing  to  within  modules  Is  applicable,  and  It  eliminates  the  log,  calculations,  thus  effecting 
savings  in  computer  time. 

Jones  and  Mays  (14)  have  experimented  with  a  fault-detection  system  based  on 
Seshu's  local  search  method  but  incorporating  changes  that  improve  the  ability  of  the 
program  to  find  test  sequences  for  all  listed  faults.  Instead  of  abandoning  a  test  path 
when  output  patterns  no  longer  partition  the  equivalence  class,  the  state  of  the  internal 
feedback  lines  are  examined,  along  with  the  outputs.  Information  gain  is  then  figured  on 
the  response  of  the  memory  states  as  well  as  on  the  output.  If  Improvement  is  obtained 
by  this  procedure,  the  test  sequence  is  continued  until  either  partitioning  based  on  output 
states  or  a  jet  limit  on  the  number  of  steps  is  reached. 

The  local  search  method,  while  it  discovers  faults  riqddly  In  Its  early  sUges,  tends 
to  wandei'  and  be  less  productive  when  few  faults  remain  unpartltloned.  Jones  and  Mays 
therefore  cause  the  program  to  break  into  a  new  random  search  phase  when  local  search 
is  sensed  to  have  proceeded  to  unproductlvlty.  The  first  task  of  this  phase  is  to  try  all 
reset  states  for  any  new  output  partitioning.  Then,  if  undetected  faults  still  remain,  a 
reset  combination  is  chosen  as  a  starting  point  and  an  input  combination  chosen  at  random 
is  applied  while  looking  for  a  new  state  defined  by  the  levels  of  the  feedback  and  output 
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lines.  Each  new  state  that  detects  a  fault  Is  recorded,  and  the  process  is  repeated  until 
all  faults  or  all  states  have  been  exhausted. 

When  the  states  that  detect  the  remaining  faults  have  been  ascertained,  a  search  is 
made  to  find  the  minimum  transfer  sequences  between  the  reset  states  and  closest  states 
detecting  faults.  These  last  sequences  are  added  to  the  local  search  phase  sequences, 
thus  making  up  the  total  test  sequence. 


! 

! 


SUMMARY 

Systematic  procedures  for  the  diagnosis  of  combinatorial  networks  have  been  de¬ 
vised.  In  the  case  of  sequential  networks,  nothing  found  in  the  literature  offers  complete 
testing  with  reasonable  computer  costs. 

It  tests  exist  for  the  determination  of  given  failures  in  a  combinational  circuit,  then 
the  critical  path  or  sensitivity  methods  uiU  find  them.  Circuitry  known  to  be  combinato¬ 
rial  would  be  best  tested  by  methods  other  than  the  general  sequential  approach. 

Two  approaches  covering  the  testing  of  sequential  networks  are  the  state  table  and 
the  directed  search  methods.  Prohibitive  computer  time  and  memory  requirements  bar 
the  use  of  state  table  methods  as  they  now  stand.  The  directed  search  method,  vdille  it 
loses  efficiency  In  the  last  stages  of  test  generation.  Is  (on  the  average)  extremely 
powerfuL 

tt  appears  from  the  latest  efforts  that  approaches  combining  variations  on  the  di¬ 
rected  search  method  and,  perhaps  state  table  methods,  will  bear  the  choicest  fruit. 


FUTURE  WORK 

To  assemble  a  diagnostic  system  for  digital  networks,  three  things  are  required: 

1.  A  programmable  logic  simulator, 

2.  A  diagnostic  test  generating  system,  and 

3.  A  test-sequence  application  and  control  unit. 

1.  A  synthesis  of  software  simulators  suitable  for  sequential  logic  Is  no  small  task 
by  Itself.  It  must,  for  diagnostic  applications,  be  flexible  enough  to  handle  programmable 
fault  condltlcms  and  be  able  to  recognize  osclUattons  and  races  under  control  of  the 
diagnostic  test  generator.  Considering  the  complexity  of  this  portion  of  the  system  re¬ 
quirements,  It  would  be  advantageous  to  utilize  existing  software,  making  whatever  mod¬ 
ifications  are  necessary. 

2.  The  literature  (15,16),  Indicates  that  directed  search  test  generators  appear  to 
promise  the  greatest  flexibility,  the  most  testing  power,  and  the  n.ost  j'Miomlcal  use  of 
computer  facilities. 

A  programming  system  written  by  Seshu  and  incorporating  a  logic  simulator  and 
diagnostic  test  generator  has  been  converted  to  CDC-3600  use  by  Chang  and  Goetz  at  Bell 
Telephone  Laboratories.  Arrangements  have  been  Initiated  for  obtaining  a  copy  of  this 
program  to  use  as  an  experimental  tool.  It  is  an  Improved  version  of  Seshu's  original 
local  search  routine  with  t  'ategles  for  making  random  and  comblnatlmal  test  searches 
at  program  discretion.  T?  ^Togram  would  provide  a  vehicle  for  experimenting  with 
different  approaches.  Replacing  Seshu's  Informatlcm  gain  criteria  with  Chang's 
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distlnguishablllty  criteria  for  testing  within  moduied  should  realize  a  reduction  In  test 
sequence  sizes. 

Applying  the  Jones  and  Mays  integrated  fault -detection  method  to  a  system  with 
fault  distlnguishablllty  capabilities  might  result  In  an  efficient  diagnostic  system  with 
more  complete  test-finding  capabilities. 

Also,  a  Fortran  IV  logic  simulator  Is  available  from  the  University  of  Buffalo, 
and  arrangements  have  been  made  to  obtain  it. 

3.  Once  a  test  sequence  has  been  generated,  it  is  necessary  to  have  a  device  which 
wUl  apply  the  sequence  to  the  network  in  question  and  properly  interpret  the  results.  It 
Is  Impractical  to  assign  the  job  to  the  compu'er  on  which  the  diagnose  sequences  are 
generated.  Rather,  it  Is  anticipated  that  test  sequences  written  on  magnetic  tape  would 
be  applied  by  a  special  unit  consisting  of  either  a  digital  tape  deck  with  special  logic  or  a 
small  general  purpose  computer.  Suitable  Interface  flexibility  would  have  to  be  provided 
for  handling  the  voltage.  Impedance,  and  timing  requirements  of  various  circuitry. 
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^  Finding  efficient  testing  procedures  for  digital  machines  has  become  of  prime  concern  to 
the  Industry  due  to  high  circuit  densities  brought  about  by  evolution  in  semiconductor  device 
technology. 

The  number  of  inputs  required  for  testing  can  be  reduced  from  the  set  of  all  possible  input 
combinations  to  a  smaller  group  derived  from  a  dictionary  of  tests  which  defines  unique  rela¬ 
tionships  between  failure  mode  and  output  response.  Reduction  of  the  tost  dictionary  by 
prime-implicant  minimization  methods  and  by  serial  application  of  the  reduced  set  can  lead 
to  manageable  test  programs.  These  Involve  sequence  lengths  characterized  by  a  lower  limit, 
bounded  by  the  logarithm  of  the  number  of  Initial  table  entries,  >. 

Testing  sequential  machines  is  especially  cumbersome  due  tolthe  dependency  of  circuit 
response  on  previous  input  sequences.  Lines  of  attack  include  checking  for  consistency  be¬ 
tween  circuit  response  and  design  state  table.  A  more  manageable  scheme  involves  grouping 
machines  of  specific  failures  according  to  their  responses  to  selected  test  inputs.  A  proper 
choice  of  inputs  for  each  test  step  and  the  adaptive  application  of  the  resulting  sequences 
provides  relatively  efficient  fault-location  programs. 

Practical  schemes  for  complete  testing  have  yet  to  be  found.  Adaptive  sequence  genera¬ 
tors  with  programmed  options  for  state-table  and  combinational  analysis  appear  to  yield  more 
promising  results. 
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